bump #288
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: bump | |
| on: | |
| workflow_dispatch: | |
| schedule: | |
| - cron: '0 0 * * *' | |
| jobs: | |
| cni-plugins: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| token: ${{ secrets.VEXXHOST_BOT_PAT }} | |
| - run: ./hack/bump/cni-plugins.sh | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| - uses: step-security/create-pull-request@50c103da2b9ca12cd5bc013fc6931051a5aa872b # v8.1.1 | |
| with: | |
| token: ${{ secrets.VEXXHOST_BOT_PAT }} | |
| push-to-fork: vexxhost-bot/ansible-collection-containers | |
| commit-message: "chore(deps): update cni-plugins" | |
| signoff: true | |
| branch: bump/cni-plugins | |
| delete-branch: true | |
| title: "chore(deps): update cni-plugins" | |
| body: | | |
| ## Automated `cni-plugins` update | |
| This PR updates the `cni-plugins` binaries to the latest versions. | |
| containerd: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| token: ${{ secrets.VEXXHOST_BOT_PAT }} | |
| - run: ./hack/bump/containerd.sh | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| - uses: step-security/create-pull-request@50c103da2b9ca12cd5bc013fc6931051a5aa872b # v8.1.1 | |
| with: | |
| token: ${{ secrets.VEXXHOST_BOT_PAT }} | |
| push-to-fork: vexxhost-bot/ansible-collection-containers | |
| commit-message: "chore(deps): update containerd" | |
| signoff: true | |
| branch: bump/containerd | |
| delete-branch: true | |
| title: "chore(deps): update containerd" | |
| body: | | |
| ## Automated `containerd` update | |
| This PR updates the `containerd` binaries to the latest versions. | |
| cri-tools: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| token: ${{ secrets.VEXXHOST_BOT_PAT }} | |
| - run: ./hack/bump/cri-tools.sh | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| - uses: step-security/create-pull-request@50c103da2b9ca12cd5bc013fc6931051a5aa872b # v8.1.1 | |
| with: | |
| token: ${{ secrets.VEXXHOST_BOT_PAT }} | |
| push-to-fork: vexxhost-bot/ansible-collection-containers | |
| commit-message: "chore(deps): update cri-tools" | |
| signoff: true | |
| branch: bump/cri-tools | |
| delete-branch: true | |
| title: "chore(deps): update cri-tools" | |
| body: | | |
| ## Automated `cri-tools` update | |
| This PR updates the `cri-tools` binaries to the latest versions. | |
| nerdctl: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| token: ${{ secrets.VEXXHOST_BOT_PAT }} | |
| - run: ./hack/bump/nerdctl.sh | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| - uses: step-security/create-pull-request@50c103da2b9ca12cd5bc013fc6931051a5aa872b # v8.1.1 | |
| with: | |
| token: ${{ secrets.VEXXHOST_BOT_PAT }} | |
| push-to-fork: vexxhost-bot/ansible-collection-containers | |
| commit-message: "chore(deps): update nerdctl" | |
| signoff: true | |
| branch: bump/nerdctl | |
| delete-branch: true | |
| title: "chore(deps): update nerdctl" | |
| body: | | |
| ## Automated `nerdctl` update | |
| This PR updates the `nerdctl` binaries to the latest versions. | |
| runc: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| token: ${{ secrets.VEXXHOST_BOT_PAT }} | |
| - run: ./hack/bump/runc.sh | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| - uses: step-security/create-pull-request@50c103da2b9ca12cd5bc013fc6931051a5aa872b # v8.1.1 | |
| with: | |
| token: ${{ secrets.VEXXHOST_BOT_PAT }} | |
| push-to-fork: vexxhost-bot/ansible-collection-containers | |
| commit-message: "chore(deps): update runc" | |
| signoff: true | |
| branch: bump/runc | |
| delete-branch: true | |
| title: "chore(deps): update runc" | |
| body: | | |
| ## Automated `runc` update | |
| This PR updates the `runc` binaries to the latest versions. |